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DETAILED ACTION 



1 . Claims 1 - 8, 10, 1 1, 19 and 20 are presented for examination. 

Claim Rejections - 35 USC § 112 

2. The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

3. Claims 1 - 4 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to comply with 
the written description requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in the relevant 
art that the inventor(s), at the time the application was filed, had possession of the claimed 
invention. 

4. The limitation of, "wherein launching the set-up program module comprises installing the 
logging code in a memory of the computer, setting a registry key in the operating system as an 
indicator to the application program to load the logging code, and signifies user consent to have 
application program actions logged," in claim 1 is not found in the specification. The 
specification is void of the set up program comprises both a setting of a registry key and that the 
setting of the registry key signifies user consent to have application program actions logged. 
Applicant is asked to amend or show in the specification and drawing where this limitation is 
taught in its totality. 
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Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 1, 3 and 4 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Terry (6961765) in view of Gruyer et al. (2002/0112048) (hereinafter Gruyer) in further 
view of Raveis, JR. (2001/0047282) (hereinafter Raveis) in further view of Achiwa et ah 
(2003/0009438) (hereinafter Achiwa). 

7. Referencing claim 1, as closely interpreted by the Examiner, Terry teaches a client-side 
system stored on a computer, wherein the client-side system logs, in a logging file, a plurality of 
user interactions performed in an application program module and periodically uploads the 
logging files to a remote server system for analysis of the logging file, wherein the client-side 
system comprises: 

8. a logging code in communication with the application program module, wherein the 
logging code comprises a plurality of hooks into the application program module and an 
operating system of the computer, wherein when a user performs recordable action within an 
application program, one of the plurality of hooks is triggered and a data record is generated, 
(e.g., col. 13, lines 30 -52); 
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9. a logging file in communication with the logging code, wherein the logging code stores 
the data record in the logging file, (e.g., col. 13 5 lines 30 - 52 & col. 14, line 54 - col. 15, line 
30); . 

1 0. a script file in communication with the logging file, wherein the script file is operative to 
upload the logging file to the remote server system, (e.g., col. 15, lines 18 - 65), 

11. a set-up program module, wherein launching the set-up program module comprises 
installing the logging code in a memory of the computer, setting a registry key in the operating 
system as an indicator to the application program to load the logging code, and new software that 
is authorized, (e.g., col. 9, lines 60 - 67, col. 17, lines 18-65, "Most Windows applications 
write data to the registry, at least during installation, '\ & col. 19, lines 19 - 50), but does not 
specifically teach wherein uploading the logging file to the remote server system comprises 
opening an Active Data Object (ADO) session with the remote server system and placing the 
logging file into an ADO database record set; 

12. renaming the logging file with a random number therein preventing duplication of a 
logging file name at the remote server system; and 

13. a set-up program module, wherein launching the set-up program module signifies user 
consent to have application program actions logged. 

14. Gruyer teaches a set-up program module, wherein launching the set-up program module 
signifies user consent to have application program actions logged, (e.g., f 0040 - 0041). It would 
have been obvious to one of ordinary skill in the art at the time the invention was made to 
combine Gruyer with Terry because it enables a users the choice of whether or not they wish to 
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be monitored by a network administrator. Furthermore, unlawfully loading of software that 
monitors users activities is an invasion of privacy and against the law, spyware. 

15. Raveis teaches the remote server system comprises opening an Active Data Object 
(ADO) session with the remote server system and placing the logging file into an ADO database 
record set, (e.g., ^1 0197 and 0226 - 0228). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to combine Raveis with the combine inventions of 
Terry and Gruyer because utilizing ADO database technology allows the system to communicate 
with multiple different types of databases which allows seamless integration and connection of 
different formatted databases. 

16. Achiwa teaches renaming the logging file with a random number therein preventing 
duplication of a logging file name at the remote server system, (e.g., ^ 0065 & 0073). It would . 
have been obvious to one of ordinary skill in the art at the time the invention was made to 
combine Achiwa with the combine inventions of Terry, Gruyer and Raveis because generating a 
random file name, whether name and/or number, and saving it on a server would allow the 
system to have no identical file names in their directory. 

17. Referencing claim 3, as closely interpreted by the Examiner, Terry teaches the script file 
uploads the logging file to the remote server system via an Internet connection, (e.g., col. 1 5, 
lines 18-65). 



18. Referencing claim 4, as closely interpreted by the Examiner Terry teaches the script file 
and logging code are generated by a set-up program module included with the application 
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program module and stored on the computer, (e.g., col. 13, lines 30 - 52 & col. 14, line 54 - col. 
15, line 30). 

19. Claims 2, 5, 6, 10, 11, 19 and 20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Terry, Gruyer, Raveis and Achiwa as applied above, and in further view 
of Burgess et al. (5796633) (hereinafter Burgess). 

20. Referencing claim 2, as closely interpreted by the Examiner, Terry, Gruyer, Raveis and 
Achiwa do not specifically teach a scheduled event stored in the operating system and created in 
a predetermined time period, wherein, in response to the scheduled event being triggered, the 
script file uploads the logging file to the remote server system. Burgess teaches a scheduled 
event stored in the operating system and created in a predetermined time period, wherein, in 
response to the scheduled event being triggered, the script file uploads the logging file to the 
remote server system, (e.g., col. 8, lines 19-63, "Logging thread 50 logs performance data 
each predetermined time interval "). It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to combine Burgess with the combine system of Terry, 
Gruyer, Raveis and Achiwa because starting and ending specific events and labeling them with a 
time stamp in the operating system give the system the ability to maintain the newest information 
available and discard old information that isn't of use to the system anymore. 
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21 . Referencing claim 5, as closely interpreted by the Examiner, Terry teaches a computer- 
implemented method for tracking a plurality of user interactions performed in a software 
application program module stored on the user's computer, the method comprising the steps of: 

22. determining if any recordable user interaction performed in the software application 
program module has occurred by determining whether a notification has been received by a 
logging code from any one of a plurality of hooks, wherein each of the plurality of hooks causes 
an event message to be routed to the logging code for an analysis, (e.g., col. 13, lines 30 - 52 & 
col. 1 4, line 54 - col. 1 5, line 30); 

23. recording the user interaction in a logging file on the computer, (e.g., col. 1 3, lines 30 - 
52 & col. 14, line 54 - col. 15, line 30); 

24. determining whether the logging file exists, and, if so, then uploading the logging file to a 
remote analysis server, (e.g., col. 13, lines 30 - 52 & col. 14, line 54 - col. 15, line 30), but does 
not specifically teach allowing a user to determine if they wish to have interactions with the 
software application program module logged; 

25. the analysis comprising an inspection of the event message to determine whether the 
event message affects a user interface of the application program module prior to the event 
message being sent to the application program module; 

26. opening an Active Data Object (ADO) session with the remote analysis server; 

27. placing the logging file into an ADO database record set; 

28. determining that a scheduled event is triggered during a predetermined time period; and 

29. wherein uploading the logging file comprises posting the ADO database record set to the 
remote analysis server; 
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30. renaming the logging file with a random number therein preventing duplication of a 
logging file name at the remote server system. 

3 1 . Gruyer teaches allowing a user to determine if they wish to have interactions with the 
software application program module logged, (e.g., ^ 0040 - 0041); 

32. by determining whether a notification has been received by a logging code from any one 
of a plurality of hooks, wherein each of the plurality of hooks causes an event message to be 
routed to the logging code for an analysis, the analysis comprising an inspection of the event 
message' to determine whether the event message affects a user interface of the application 
program module prior to the event message being sent to the application program module, (e.g., 
H 0069, 0072, SetWindowsHookEx WINDOWS API). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to combine Gruyer with Terry 
because of similar reasons stated above. Further obvious reasons are noted in Gruyer in 
paragraphs 0069-0075. It is stated that when monitoring actions of a user that affects a browser, 
such as using a mouse to click on a link, the system builds a high level descriptive history of user 
behavior or web usage from low level GUI basic event and object interactions such as frames, 
mouse clicks, resizes and in-activities. 

33. Burgess teaches determining that a scheduled event is triggered during a predetermined 
time period, (e.g., col. 8, lines 19-63, "Logging thread 50 logs performance data each 
predetermined time interval "). It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to combine Burgess with the combine system of Terry, Gruyer 
and Raveis because of similar reasons stated above. 
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34. Raveis teaches opening an Active Data Object (ADO) session with the remote analysis 
server, (e.g., ^ 0197 and 0226 - 0228); 

35. placing the logging file into an ADO database record set, (e.g., 0197 and 0226 - 0228); 

36. wherein uploading the logging file comprises posting the ADO database record set to the 
remote analysis server, (e.g., U 0197 and 0226 - 0228). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to combine Raveis with the combine 
inventions of Terry, Gruyer and Burgess because of similar reasons stated above. 

37. Achiwa teaches renaming the logging file with a random number therein preventing 
duplication of a logging file name at the remote server system, (e.g., 1f 0065 & 0073). It would 
have been obvious to one of ordinary skill in the art at the time the invention was made to 
combine Achiwa with the combine inventions of Terry, Gruyer and Raveis because of similar 
reasons stated above. 

38. Referencing claim 6, as closely interpreted by the Examiner, Terry teaches each recorded 
user interaction comprises a time stamp, (e.g., col. 16, line 49 - col. 17, line 18), 

39. a user identification, (e.g., col. 17, lines 33 - 65), 

40. a UI element identifier, (e.g., col. 17, lines 33 - 65), and . * 

41 . a description of the method invoked to interact with the software application program 
module, (e.g., col. 17, lines 33 - 65). 

42. As per claim 10, as closely interpreted by the Examiner, Terry does not specifically teach 
the remote analysis server is a Hypertext Transfer Protocol (HTTP) server. Gruyer teaches the 
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remote analysis server is a Hypertext Transfer Protocol (HTTP) server, (e.g., U 0065). It would 
have been obvious to one of ordinary skill in the art, at the time the invention was conceived, to 
combine Gruyer with Terry because utilizing an HTTP server, (web server), give the system the 
ability to communicate with users from different networks on the web. 

43. As per claim 1 1, as closely interpreted by the Examiner, Terry teaches a computer- 
readable medium comprising computer-executable instructions, which when executed, are 
operable to perform the steps of claim 1 0, (e.g., col. 1 6, line 49 - col. 17, line 1 8). 

44. Referencing claim 19, as closely interpreted by the Examiner, Terry teaches each 
recorded user interaction further comprises at least one of the following; 

45. an application source, (e.g., col. 8, lines 14 - 30); 

46. verbal dialog invoked, (e.g., Abstract & col. 12, line 47 - col. 13, line 16); 

47. button pressed, (e.g., col. 8, lines 14 - 30); 

48. menu used, (e.g., col. 8, lines 14 - 30); 

49. menu item selected, (e.g., col. 8, lines 14 - 30); 

50. application launch, (e.g., col. 8, lines 14 - 3.0); 

51. application termination, (e.g., col. 8, lines 14 - 30); 

52. operating system used, (e.g., col. 8, lines 14 - 30); and 

53. screen resolution. 
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54. Referencing claim 20, as closely interpreted by the Examiner, Terry teaches the 
description of the method invoked to interact with the software application program module ' 
comprises at least one of keyboard or mouse, (e.g., col. 8, lines 14 - 30). 

55. Claims 7 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Terry, Gruyer, Raveis, Achiwa and Burgess in further view of Jawahar et al. (6256620), 
(hereinafter Jawahar). 

56. As per claim 7, as closely interpreted by the Examiner, Terry, Gruyer, Raveis, Achiwa 
and Burgess do not specifically teach the step of deleting the logging file on the computer after it 
has been uploaded. Jawahar teaches the step of deleting the logging file on the computer after it 
has been uploaded, (e.g., col. 15, lines 17 - 32). It would have been obvious to one of ordinary 
skill in the art, at the time the invention was conceived, to combine Jawahar with the combine 
system of Terry, Gruyer, Raveis, Achiwa and Burgess because deleting the logging file after 
sending it to a server would free up more memory at the users terminal for additional logging 
data to be stored and transferred. 

57. As per claim 8, as closely as interpreted by the Examiner, Terry, Gruyer and Raveis do 
not specifically teach renaming the logging file comprises renaming the logging file with a 
random number before uploading the logging file to the remote analysis server. Achiwa teaches 
renaming the logging file comprises renaming the logging file with a random number before 
uploading the logging file to the remote analysis server, (e.g., ^ 0073 - 0075). It would have been 
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obvious to one of ordinary skill in the art, at the time the invention was conceived, to combine 
Achiwa with the combine inventions of Terry, Gruyer and Raveis because renaming a file with a 
random number could prevent a system from naming a file with the same name 

Response to Arguments 

58. Applicant's arguments filed 1 1/02/2007 have been fully considered but they are not 
persuasive. 

59. In the Remarks, Applicant argues in substance that Terry, Gruyer, Raveis and Achiwa fail 
to teach setting of the registry key as an indicator to the application program to load the logging 
code as recited in amended claim 1 . 

60. As to the first remark, Applicant admits in their earlier remarks starting at the fifth page 
of the remarks, specifically where Applicant cites the areas of Terry in columns 9 and 19). It is 
seen that Terry teaches that a registry key is opened as part of an analysis to determine 
unauthorized changes within a particular segment of the registry. Therefore, one of ordinary skill 
in the art would know that a registry key in Terry, at one point, would have had to be updated or 
changed in some way. Further discussion of Terry teaching updating registry keys is found in the 
cited area above, in which Terry teaches that the registry is always modified when an installation 
or re-initialization occurs. 
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61 . In the Remarks, Applicant argues in substance that Terry, Gruyer, Raveis, Achiwa and 
Burgess fail to teach the features specified in amended claim 5. More specifically, Raveis fails to 
disclose the analysis of event messages sent from a plurality of hooks to a logging code. 

62. As to the second remark, Applicant is asked to view the above newly cited areas of the 
amended claim 5.. In which, one can find the teachings disclosed in claim 5. 

63. All other Remarks in regards to the dependent claims under a 103 rejection discuss the 
same deficiencies that are talked about above and therefore the same response can be applied that 
is stated above. 

Conclusion 

64. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

65. a. Golender et al. U.S. Pub. No. 2002/0087949 discloses System and method for 
software diagnostics using a combination of visual and dynamic tracing. 

66. b. Caplan U.S. Pub. No. 2003/0050834 discloses System and method for dynamic 
customizable interactive portal active during select computer time. 

67. c. Mohamed Alhadad et al. U.S. Pub. No. 2002/0090062 discloses Automated 
business form information acquisition system. 
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68. d. Hayner et al. U.S. Pub. No. 2004/0100507 discloses System and method for 
capturing browser sessions and user actions. 

69. e. Chu et al. U.S. Patent No. 6970924 discloses Methods and apparatus for 
monitoring end-user experience in a distributed network. 

70. f. Liu et al. U.S. Patent No. 6839680 discloses Internet profiling. 

71 . g. Pham et al. U.S. Patent No. 6820136 discloses System and method for replicating 
monitored registry keys. 

72. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David E. England whose telephone number is 571-272-3912. 
The examiner can normally be reached on Mon-Thur, 7:00-5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan J. Flynn can be reached on 571-272-1915. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtaine 
Application Information Retrieval (PAIR) system. Status information for pub^lme^pplicati^^59 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



David E. England 

Examiner 
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